127569 matches found
CVE-2023-2825-Gitlab
CVE-2023-2825 On May 23, 2023 GitLab released version 16.0.1 which fixed a critical vulnerability, CVE-2023-2825, affecting the Community Edition CE and Enterprise Edition EE version 16.0.0. The vulnerability allows unauthenticated users to read arbitrary files through a path traversal bug. It wa...
CVE-2023-39714
This repository does not have a README...
CVE-2023-37478_npm_vs_pnpm
pnpm vs npm exploit This repo showcases how a difference in npm and pnpminstallation from tarballs can be exploited. The exploit is recorded in CVE-2023-37478. The javascript package constructed here claims it prints out a nice message to the user. When installed with npm, this is true. However,...
CVE-2023-24488-PoC
Python & Golang PoC file for CVE-2023-24488 Twitter@SirBagoza...
Mahesh-970-CVE-2023-21125_bluedriod_repo
This repository does not have a README...
Citrix-Bleed-Buffer-Overread-Demo
Citrix-Bleed-Buffer-Overread-Demo This code functionally approximates the Citrix Bleed vulnerability CVE-2023-4699 of the improper handling of the return value of snprintf in C...
CVE-2023-36884
This repository does not have a README...
frameworks_base_AOSP-4.2.2_r1_CVE-2023-21272
This repository does not have a README...
CVE-2023-24078
Description This script is a Proof of Concept PoC exploit I developed for CVE-2023-24078. After trying the publicly available PoCs that were not functional and facing frustration in trying to troubleshoot them, I just created my own script. Usage root@kitploit: usage: python3 CVE-2023-24078.py -h...
LooneyPwner
LooneyPwner Exploit tool for CVE-2023-4911, targeting the 'Looney Tunables' glibc vulnerability in various Linux distributions. LooneyPwner is a proof-of-concept PoC exploit tool targeting the critical buffer overflow vulnerability, nicknamed "Looney Tunables," found in the GNU C Library glibc...
CVE-2023-38646
CVE-2023-38646 Fork ofkh4sh3i's removing the need for Burp Collector. CVE-2023-38646 Pre-Auth RCE in Metabase: Metabase open source before 0.46.6.1 and Metabase Enterprise before 1.46.6.1 allow attackers to execute arbitrary commands on the server, at the server's privilege level. Authentication ...
CVE-2023-27146-LocalPotato-Priviledge-Escalation
CVE-2023-27146-LocalPotato-Priviledge-Escalation...
CVE-2023-4226
🛠️ Exploitation CVE-2023-4226 for Chamilo LMS 📋 Description Python script that automates the exploitation of CVE-2023-4226 , an unrestricted file upload vulnerability in Chamilo LMS = v1.11.24. Uploads a PHP web shell based on PentesterMonkey and configures .htaccess to achieve a reverse shell...
HTTP-2-RapidReset-CVE-2023-44487-Testlab
This repo is the source code of my docker lab, made for my thesis research...
CVE-2023-1177-rebuild
...
CVE-2023-38646-Poc
CVE-2023-38646-Poc usage python check.py ip port Vulnerable version root@kitploit: Metabase Enterprise 1.46 1.46.6.1 Metabase Enterprise 1.45 1.45.4.1 Metabase Enterprise 1.44 1.44.7.1 Metabase Enterprise 1.43 1.43.7.2 Metabase open source 0.46 0.46.6.1 Metabase open source 0.45 v0.45.4.1 Metabas...
CVE-2023-51385
CVE-2023-51385...
teamcity-exploit-cve-2023-42793
TeamCity Exploit Cve 2023 42793 A quick script to exploit the cve-2023-42793 bug. Some additional reading on the exploit can be found here: https://www.fortinet.com/blog/threat-research/teamcity-intrusion-saga-apt29-suspected-exploiting-cve-2023-42793...
CVE-2023-42793
CVE-2023-42793 For educational purposes only PoC for CVE-2023-42793 Usage CVE-2023-42793admin.sh: root@kitploit: chmod +x CVE-2023-42793admin.sh ./CVE-2023-42793admin.sh ip/domainname port Proof of working: Usage CVE-2023-42793rce.sh: root@kitploit: chmod +x CVE-2023-42793rce.sh...